Linux Commands

Search…
Linux Commands
 The Shell - Bash
The shell, or the terminal is a really useful tool. Bash is the standard shell on most Linux distros.
Navigating
pwd - Print working directory
cd - Change directory
cd ~ - Change directory to your home directory
​
Looking at files
ls - List files in directory
ls -ltr - Sort list by last modified. -time -reverse
file - Show info about file. What type of file it is. If it is a binary or text file for example.
cat - Output content of file.
less - Output file but just little bit at a time. Use this one. Not more.
Use /searchterm to search. It is the same command as in vim. n to scroll to next search result. Press q to quit.
more - Output file but just little bit at a time. less is better.
A little bit of everything
history - Show commands history
sudo
List what rights the sudo user has.
1
sudo -l
Copied!
Sudo config file is usually /etc/sudoers
​
Working with files
touch - Create a new file.
cp - Copy
mkdir - Make directory.
1
# Make entire directory structure
2
mkdir -p new/thisonetoo/and/this/one
Copied!
rm - Remove file
1
# Remove recursively and its content. Very dangerous command!
2
rm -rf ./directory
3
​
Copied!
​
Find
Find is slower than locate but a lot more thorough. You can search for files recursively and with regex and a lot of other features.
1
# This will send all permissions denied outputs to dev/null.
2
find / -name file 2>/dev/null
Copied!
Locate
Locate is really fast because it relies on an internal database. So in order to have it updated you need to run:
1
sudo updatedb
Copied!
Then you can easily find stuff like this:
1
locate filename
Copied!
Which
Outputs the path of the binary that you are looking for. It searches through the directories that are defined in your $PATH variable.
1
which bash
2
# Usually outputs: /bin/bash
3
​
Copied!
Filters
There are certain programs that are especially useful to use together with pipes. They can also be used as stand-alone programs but you will often see them together with pipes.
sort
1
sort test.txt
Copied!
uniq
1
sort -u test.txt
2
sort test.txt | uniq
3
cat filename | sort -u > newFileName
Copied!
grep
head
tail
tr

​
Editing text
sed
Can perform basic editing on streams, that is to say, text.
Remove first line of file/stream
1
sed "1d"
Copied!
cut
Cut by column
This is a useful command to cut in text.
Let's say that we have the following text, and we want to cut out the ip-address.
1
64 bytes from ip: icmp_req=1 ttl=255 time=4.86 ms
Copied!
1
cut -d" " -f4
Copied!
-d stands for delimiter. and -f for field.
tr - Translate
Transform all letter into capital letters
1
tr "[:lower:]" "[:upper:]" < file1 > file2
2
​
Copied!
​
Example
Remove character
1
# Remove characters
2
cat file.txt | tr -d "."
3
​
4
# Remove and replace
5
# Remove all dots and replace them with underscore.
6
cat file.txt | tr "." "_"
Copied!
​
awk
So awk is an advanced tool for editing text-files. It is its own programming language to it can become quite complex. Awk iterates over the whole file line by line.
This is the basic structure of an awk command
1
awk '/search_pattern/ { action_to_take_on_matches; another_action; }' file_to_parse
Copied!
The search pattern takes regex.
You can exclude the search portion or the action portion.
This just prints every line of the file.
1
awk '{print}' filename
Copied!
Filtering out specific ip-address:
1
awk '/172.16.40.10.81/' error.log
Copied!
Now we want to print out the fourth column of that file, we can just pipe this to cut, but we can also use awk for it, like this:
1
awk '/172.16.40.10.81/ {print $4}' error.log
2
# Another example
3
awk '{print $2,$5;}' error.txt
4
This prints columns 2 and 5.
Copied!
We can use the -F flag to add a custom delimiter.
1
awk -F ':' '{print $1}' test.txt
Copied!
​
3. User management
To add a user we do:
1
adduser NameOfUser
2
​
3
# On some machines it is
4
useradd nameOfUser
Copied!
To add user to sudo-group:
1
adduser NameOfUser sudo
Copied!
On some machines we might not be able to edit the sudoers file because we don't have an interactive shell, in this case can you can just redirect the text into the file, like this:
1
echo "username ALL=(ALL) ALL" >> /etc/sudoers
Copied!
Check which users are in the sudo group:
1
cat /etc/group | grep sudo
Copied!
Switch user in terminal:
1
su NameOfUser
Copied!
Remove/delete user:
1
sudo userdel NameOfUser
Copied!
4. Permissions
1
ls -la
Copied!
Shows all the files and directories and their permission settings.
1
drwxrwxrwt 2 root root 4,0K ago  3 17:33 myfile
Copied!
Here we have 10 letters in the beginning. The first one d shows that it is a directory.
The next three letters are for read, w for write and x for execute. The first three belong to the owner, the second three to the group, and the last three to all users.
​https://linuxjourney.com/lesson/file-permissions​
5. Processes
To display information regarding the systems processes you can use the ps command.
1
ps -aux
Copied!
-a stands for all -u stands for all processes by all users -x stands for all processes that don't run a tty+

​
Install package
Example of how to install something with apt:
1
sudo apt-get install nmap
2
​
Copied!
​
Remove packages
This can be tricky. First find the package
1
dpkg --list
Copied!
Then you find it in your list.
1
sudo apt-get --purge remove nameOfProgram
Copied!
​
Organizing your $path variable
I am talking about debian/ubuntu here. On other systems I don't know.
You can define your path in /etc/environment. If you don't have it you can create it and add the path like this:
1
source /etc/environment && export PATH
Copied!
If you are using zsh (which you should) you have to add it here
1
sudo vim /etc/zsh/zshenv
Copied!
And add this line somewhere:
1
source /etc/environment
Copied!
​
Adding a path
This is a non-persistent way to add binaries to your path. Might be useful if you have entered a system that has limited binaries in the path.
1
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
Copied!
​
7. Cronjobs
There are two ways to configure cronjobs. The first one is by putting scripts in the following folders.
1
/etc/cron.daily
2
/etc/cron.hourly
3
/etc/cron.weekly
4
/etc/cron.monthly
Copied!
The second way is to write the command in the crontab
1
# list cronjobs
2
crontab -l
3
​
4
# Edit or create new cronjobs
5
crontab -e
Copied!
​
8. Devices
List all devices
1
fdisk -l
Copied!
9. The Filesystem 
Difference between sbin and bin
sbin is system binaries. A normal user do not have access to these binaries. It is only root and users with sudo privileges that do.
​
​
Mount
So everything on the linux-filesystem belongs to some part of the filesystem-tree. So if we plug in some device we need to mount it to the filesystem. That pretty much means that we need to connect it to the filesystem. Mount is like another word for connect.
So if you want to connect a CD-rom or USB to your machine. You need to mount it to a specific path on the filesystem.
So if you plug in the usb it might be accessible at /dev/usb. But that it not enough for you to be able to browse the usb content. You need to mount it. You do this by writing
1
mount /dev/usb /media/usb
Copied!
Or whereever you want to mount it.
So when you click on Eject or Safetly remove you are just unmounting.
1
umount /media/usb
Copied!
Knowing how to mount and unmount might be useful if you want to get access to a remote NFS-directory. You will need to mount it to your filesystem to be able to browse it.
​
10. Controlling services
Systemctl
Systemctl can be used to enable and disable various services on your linux machine.
Start ssh
1
systemctl start ssh
2
systemctl status ssh
3
systemctl stop ssh
Copied!
​
You can verify that the service is listening for connection by running network status.
1
netstat -apnt
Copied!
Make ssh start upon boot
1
systemctl enable ssh
2
systemctl enable apache2
Copied!
Init.d
Init.d is just a wrapper around Systemctl. I prefer it.
1
/etc/init.d/cron status
2
/etc/init.d/cron start
3
/etc/init.d/cron stop
Copied!
​
16. Network basics
Netstat - Find outgoing and incoming connections
Netstat is a multiplatform tool. So it works on both mac, windows and linux.
1
$ netstat -antlp
Copied!
​
Find out what services are listening for connection on your machine
Flags
1
-a # All
2
-n # show numeric addresses
3
-p # show port
4
-t # tcp
Copied!
1
netstat -anpt
Copied!
To easily check out what process is using lots of bandwidth you can use nethogs.
1
sudo apt-get install nethogs
2
nethogs
Copied!
​
Firewall - Iptables
Iptables is a firewall tool in linux. A firewall is basically a tool that scans incoming and/or outgoing traffic. You can add rules to the iptables to filter for certain traffic.
Types of chains
So you can filter traffic in three different ways input, forward, and output. These are called three different chains.
INPUT
This is for incoming connections. If someone wants to ssh into your machine. Or a web-server responds to your request.
FORWARD
This chain is used for traffic that is not aimed at your machine. A router for example usually just passes information on. Most connections are just passing through. As you can see this will probably not be used so much on your machine, as a normal desktop or a server doesn't router that much traffic.
OUTPUT
This chain is used for outgoing traffic.
Active rules
To view your active rules you do
1
iptables -L
2
# It will output something like this
3
​
4
Chain INPUT (policy ACCEPT)
5
target     prot opt source               destination         
6
​
7
Chain FORWARD (policy ACCEPT)
8
target     prot opt source               destination         
9
​
10
Chain OUTPUT (policy ACCEPT)
11
target     prot opt source               destination
Copied!
So as we can see the current policy is to accept all traffic in all directions.
If you for some reason has been tampering with the iptables and maybe fucked up. This is how you return it to the default setting, accepting all connections
1
iptables --policy INPUT ACCEPT
2
iptables --policy OUTPUT ACCEPT
3
iptables --policy FORWARD ACCEPT
Copied!
If you instead want to forbid all traffic you do
1
iptables --policy INPUT DROP
2
iptables --policy OUTPUT DROP
3
iptables --policy FORWARD DROP
Copied!
Okay, so let's block out some connections. To do that we want to add/append a new rule. We want to block all connections from our enemy 192.168.1.30.
1
# A for append, and S for source. 
2
iptables -A INPUT -s 192.168.1.30 -j DROP
3
# Block an entire range
4
iptables -A INPUT -s 192.168.1.0/24 -j DROP
Copied!
Now if we want to see our current rules we just do
1
iptables -L
Copied!
​
Measuring bandwidth usage
There are a few different tools in hour arsenal that we can use to measure bandwidth usage. We will start with iptables.
To view the input and output traffic we just list the rules with some verbosity.
1
iptables -L -v
2
# Stdout
3
Chain INPUT (policy ACCEPT 6382 packets, 1900K bytes)
4
 pkts bytes target     prot opt in     out     source               destination         
5
​
6
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
7
 pkts bytes target     prot opt in     out     source               destination         
8
​
9
Chain OUTPUT (policy ACCEPT 4266 packets, 578K bytes)
10
 pkts bytes target     prot opt in     out     source               destination
Copied!
So clean this up and reset the count we can do the following
1
# Restar the count
2
iptables -Z
3
# Remove all the rules, FLUSH them
4
iptables -F
Copied!
​
Examples
Block outgoing connections to a specific ip
1
iptables -A OUTPUT -d ip -j DROP
Copied!
Basic Linux & Windows Commands
Windows
Last modified 1yr ago
Copy link
Contents
10. Controlling services
16. Network basics